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Listing and Amendments to the Claims 



This listing of claims will replace the claims that were published in the PCT 
Application and the International Preliminary Examination Report: 

1. (original) A method for managing a session key used for enabling 
communications between a mobile terminal and an access point in a wireless 
local area network ("WLAN"), comprising the steps of: 

receiving a request for access to the WLAN from the mobile terminal: 
determining a virtual operator associated with the access request; 
establishing a first secure channel between the access point and the 
virtual operator; 

requesting user authentication from the virtual operator via the first 
secure channel, wherein the virtual operator communicates with the mobile 
terminal via a second secure channel to authenticate the mobile terminal; 

selecting a session key and sending the session key to the virtual 
operator via the first secure channel, wherein the virtual operator sends the 
session key to the mobile terminal via the second secure channel; and 
communicating with the mobile terminal using the session key. 

2. (original) The method according to claim 1 , wherein the step of 
requesting user authentication is performed in parallel with the step of 
selecting and sending the session key. 

3. (original) The method according to claim 2, wherein the 
communicating step comprises communicating with the mobile terminal using 
the session key upon receiving notification of successful user authentication 
from the virtual operator. 
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4. (original) The method according to claim 2, wherein the step of 
selecting a session key comprises placing the session key on hold until 
notification of successful user authentication from the virtual operator, and 
upon notification removing the session key from on hold and sending the 
session key to the virtual operator. 

5. (original) The method according to claim 3, further comprising the step 
of removing the session key from on hold if the authentication is successful. 

6. (original) The method according to claim 1 , wherein the step of 
selecting a session key and sending the session key to the virtual operator 
via the first secure channel is performed only after receiving notification of 
successful user authentication from the virtual operator. 

7. (original) The method according to claim 1, wherein the virtual 
operator includes one of an Internet Service Provider, a cellular provider and 
a credit card provider. 

8. (original) An apparatus for managing a session key used for enabling 
communications between a mobile terminal and a wireless local area network 
("WLAN"), comprising: 

means for receiving a request for access to the WLAN from the mobile 
terminal: 

means for determining a virtual operator associated with the access 
request: 

first means for communicating with the virtual operator via a first 
secure channel, the first communicating means requesting user 
authentication from the virtual operator via the first secure channel, wherein 
the virtual operator communicates with the mobile terminal via a second 
secure channel to authenticate the mobile terminal: 

means, coupled to the first communicating means, for selecting a 
session key and sending the session key to the virtual operator via the first 
secure channel, wherein the virtual operator sends the session key to the 
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mobile terminal via the second secure channel; and 

second means for communicating with the mobile terminal using the 
session key. 

9. (original) The apparatus according to claim 9, wherein the first 
communicating means requests user authentication in parallel with selecting 
means selecting and sending the session key. 

10. (original) The method according to claim 9, wherein the second 
communicating means communicates with the mobile terminal using the 
session key upon receiving notification of successful user authentication from 
the virtual operator. 

1 1 . (original) The method according to claim 10, wherein the selecting 
means places the session key on hold until notification of successful user 
authentication from the virtual operator, and upon notification removes the 
session key from on hold and sends the session key to the virtual operator. 

12. (original) The method according to claim 10, wherein the selecting 
means removes the session key from on hold if the authentication is 
successful. 

13. (original) The method according to claim 8, wherein the selecting 
means selects a session key and sends the session key to the virtual 
operator via the first secure channel only after receiving notification of 
successful user authentication from the virtual operator. 

14. (original) The method according to claim 8, wherein the virtual 
operator includes one of an Internet Service Provider, a ceilular provider and 
a credit card provider. 
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15. (original) A method for controlling a mobile terminal in a wireless local 
area network (WLAN), comprising the steps of: 

transmitting a request for access to the WLAN, the request including 
data identifying an associated virtual operator; 

establishing a secure channel with the virtual operator for performing 
user authentication associated with the request for access; 

receiving a session key via the secure channel upon successful user 
authentication wherein the virtual operator receives the session key from the 
WLAN through a second secure channel; and 

establishing communications with the WLAN using the session key. 
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